Every new exploit,
on the radar.

A bash script exploit of [CVE-2020-16126/CVE-2020-16127] to achieve privilege escalation.Ubuntu 16.04-20.04 LTS本地提权漏洞利用脚本。要求拥有Gnome图形化环境。

Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability

PoC para las vulnerabilidades CVE-2020-14750 y cve-2020-14882

A proof of concept to exploit the reflected XSS vulnerability in the oVirt web interface (RedHat). In this PoC a VM in the oVirt IaaS environment is to be star…

CVE-2020-28351 - Reflected Cross-Site Scripting attack in ShoreTel version 19.46.1802.0.

A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened…

(CVE-2020-17496) vBulletin 5.x Widget_tabbedcontainer_tab_panel RCE Vuln Test script

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.

1day Exploit by sheisback

Re-implementation of VirtueSecurity's benigncertain-monitor

This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, …

simplified version of https://github.com/shauntdergrigorian/cve-2006-6184

CVE-2020-27358 and CVE-2020-27359

Pulse Secure VPN mitm Research - CVE-2020-8241, CVE-2020-8239

osCommerce Phoenix CE <=1.0.5.4 Authenticated RCE

GCHQ Stroom is vulnerable to Cross-Site Scripting due to the ability to load the Stroom dashboard on another site and insufficient protection against window ev…

Possible Account Takeover | Brute Force Ability

LPE for CVE-2020-1054 targeting Windows 7 x64

Windows 7 LPE

PoC code for CVE-2020-16939 Windows Group Policy DACL Overwrite Privilege Escalation

几条关于CVE-2020-15148（yii2反序列化）的绕过

cve-2020-15148

Writeup of CVE-2020-15906